Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

ParamDescriptionDefault
identity.urlThe URL to redirect incoming requests that do not contain the expected cookie and presumably to facilitate an authentication challenge.none
service.urlThe URL back to the KnoxSSO endpoint for the IdP to redirect the browser after authentication.none
keystore.urlThe location of the keystore with the public cert of the IdP for token validation. BUG: this is currently hardcoded to gateway.jksgateway.jks
validating.alias.keyThis is the idp domain which is used as the alias for looking up the alias for the cert to validate incoming tokens with - ie. idp.example.comnone
validating.alias.valueThis is the alias for the actual cert to use for the idp domain - ie. server.crtservercert - and is used by picket link to get to the public key for the IdP in order to verify the presented token.none
clock.skew.milisThe clock skew to use during the validation of tokensnone

...